# CVE-2015-2177

## Summary

- **CVE ID:** CVE-2015-2177
- **Severity:** HIGH
- **CVSS Score:** 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- **CWE:** N/A
- **Published:** Mar 7, 2015
- **Last Modified:** Jun 2, 2026

## Description

Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus.

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](https://ics-cert.us-cert.gov/advisories/ICSA-15-064-04)
- [CNA](http://www.securitytracker.com/id/1032040)
- [CNA](https://www.exploit-db.com/exploits/44802/)
- [CNA](http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-987029.pdf)
- [CNA](http://www.securityfocus.com/bid/72973)
- [CNA](https://cert-portal.siemens.com/productcert/pdf/ssa-987029.pdf)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 50.64%
- **EPSS Percentile:** 97.8

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._